-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 18 Aug 2025 01:31:08 +0800
Source: libxslt
Architecture: source
Version: 1.1.35-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Closes: 1108074 1109123
Changes:
 libxslt (1.1.35-1+deb12u2) bookworm-security; urgency=high
 .
   * Fix information disclosure with improved memory handling of generated-id()
     (Closes: #1108074, CVE-2023-40403)
   * Fix type confusion in xmlNode.psvi between stylesheet and source nodes
     (Closes: #1109123, CVE-2025-7424)
Checksums-Sha1:
 b80ec2195fd1901b55b9133b5acf14e935ba21b6 1842 libxslt_1.1.35-1+deb12u2.dsc
 9e4e7f884f8ac88c17df0f9475201bef985d42e4 1827548 libxslt_1.1.35.orig.tar.xz
 d2247666b95b43a27cbe409bf8c497134c73243c 29784 libxslt_1.1.35-1+deb12u2.debian.tar.xz
 0703373689ef8dfa7a31a95c4db69a24fa43f379 5444 libxslt_1.1.35-1+deb12u2_source.buildinfo
Checksums-Sha256:
 5190c8669cfbbb30f76aa3a0db99cf66d7d452333ee975153bea863ade5e9a32 1842 libxslt_1.1.35-1+deb12u2.dsc
 8247f33e9a872c6ac859aa45018bc4c4d00b97e2feac9eebc10c93ce1f34dd79 1827548 libxslt_1.1.35.orig.tar.xz
 9bb447447f396c8faf3bbf39cb6848d7af04de09594670c910f1407ab5280334 29784 libxslt_1.1.35-1+deb12u2.debian.tar.xz
 9145811bb0896635b99421421d941f69ef609732d02894c09b26c08f1f21e2b3 5444 libxslt_1.1.35-1+deb12u2_source.buildinfo
Files:
 5bb6210712f0cd904a39a862a624c2a7 1842 text optional libxslt_1.1.35-1+deb12u2.dsc
 5b3a634b77effd8a6268c21173575053 1827548 text optional libxslt_1.1.35.orig.tar.xz
 3cc995b804c8b8f39057ef3049518f8d 29784 text optional libxslt_1.1.35-1+deb12u2.debian.tar.xz
 f8c10578cb92197909cacdab86e474c2 5444 text optional libxslt_1.1.35-1+deb12u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEBLHAyuu1xqoC2aJ5NP8o68vMTMgFAmiiEz4ACgkQNP8o68vM
TMjUrQf9ETvpb/EvCyDVvz9agK8piv2fYnTO2LyU2E0twSE9m2hyJ5SSxGt8EDzY
LW5rqI5zMY75wiZ1cpT6RbNg6dApnbdzE1E6PW+0tVe0HvBgo4Bmw0m220DB7hvT
wY+pdzENg7oPTCPkFgeelW3prWjHiz3ztSL9m1iv+QQ+gXBRSTRnv0r6r6fP8rQE
uQqcUnRWNL3wSAH/f/5INmCfBfhgHVfbJNH2chcUkqTQFU3cXRul6CKuxU4Lf3XD
iPTvwHkfi7qYG3c3BNEn1B+yP417xkdjsEwbochXoEzIUgC7BAo8R52pfMpmX2li
8b5Lwc6x9EOyMICVdLBJgZLvL0/6eQ==
=+nlK
-----END PGP SIGNATURE-----